Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133322e3235352e39362e302f32322d3332203d3e2031393136.roa
File:                     3133322e3235352e39362e302f32322d3332203d3e2031393136.roa (raw, json)
Hash identifier:          7lSidbpGzxjQMkRqX3dIVMWWh6BdIHHhEYtsmnIHUEs=
Subject key identifier:   47:BD:AB:73:F5:2F:85:63:FA:CD:F7:7A:19:F8:0C:D1:A0:70:FE:8B
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       1B3C1B2AFA5C34091DCEC38C42C25E8AC25F95B5
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133322e3235352e39362e302f32322d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:05 +0000
ROA not before:           Wed 29 Nov 2023 17:44:05 +0000
ROA not after:            Wed 27 Nov 2024 17:49:05 +0000
asID:                     1916
IP address blocks:        132.255.96.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3c:1b:2a:fa:5c:34:09:1d:ce:c3:8c:42:c2:5e:8a:c2:5f:95:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:05 2023 GMT
            Not After : Nov 27 17:49:05 2024 GMT
        Subject: CN=47BDAB73F52F8563FACDF77A19F80CD1A070FE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:fe:6f:2d:0f:71:c6:d3:39:3b:d3:23:12:
                    7b:c2:be:12:2b:75:f9:58:42:53:63:72:d7:f0:01:
                    da:e5:db:77:5c:b7:33:0e:c3:89:d3:9a:44:89:c1:
                    35:ef:86:c8:46:98:7b:ae:9c:46:8a:7f:62:dd:8f:
                    00:c4:1c:74:82:a4:cc:74:de:b8:34:bd:f9:c0:52:
                    ec:b6:53:7f:6e:9f:e3:6d:5f:6a:03:2f:08:af:34:
                    61:20:f3:a5:0e:10:87:19:1f:bd:d9:08:a8:72:1e:
                    a5:46:94:ab:d0:d2:97:a3:e9:81:a9:83:cb:18:5e:
                    09:9c:28:dd:78:92:e3:4b:76:bb:a9:cb:86:10:96:
                    44:78:46:78:f1:63:2f:d6:1d:12:e6:49:ec:13:b2:
                    bc:b6:62:b2:5f:36:a8:04:46:6d:eb:c4:ba:f8:52:
                    57:4c:76:43:3d:a3:d8:94:eb:49:ec:6a:60:73:6e:
                    12:ee:09:35:26:cd:aa:ff:b3:48:21:c1:c4:0d:f4:
                    e8:6e:05:cb:ec:0f:30:fd:48:4f:f1:6b:06:b4:eb:
                    9d:7e:54:b8:36:e2:75:56:b6:13:cb:ab:f2:0d:68:
                    68:da:4c:5b:8b:d7:f1:7f:8b:a1:75:67:3e:d9:f5:
                    4b:f0:68:ff:af:9f:17:c4:11:0f:fc:67:28:17:53:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BD:AB:73:F5:2F:85:63:FA:CD:F7:7A:19:F8:0C:D1:A0:70:FE:8B
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133322e3235352e39362e302f32322d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:f2:15:7c:c3:f2:73:ef:4f:52:4b:09:68:f4:e6:2a:6f:ca:
         06:9c:97:d3:ae:cc:ec:db:17:20:51:61:d5:fe:22:fb:7a:89:
         dc:97:7d:de:65:f6:68:4d:5e:41:c0:3a:1f:43:4a:30:ee:00:
         d1:b7:cb:a5:ac:6b:57:0c:3d:75:48:5f:3e:f6:3d:28:aa:30:
         79:1c:6a:1a:c7:19:bb:d7:06:de:48:8d:85:33:90:14:20:10:
         94:1c:d6:e9:3b:e4:45:48:a2:f1:39:4c:05:67:06:22:64:6c:
         08:43:62:70:61:c2:e9:e3:72:6d:73:88:c2:ad:6d:b9:8b:16:
         91:4a:28:b9:67:82:43:7e:76:cf:6d:05:08:fb:7a:96:aa:57:
         f8:a7:bf:fb:c0:70:f1:c6:a2:cd:03:c8:39:39:f7:03:cb:54:
         03:0d:7e:cc:e6:c0:02:d0:92:47:84:33:f4:cc:86:74:7c:f9:
         7e:d2:fe:ed:de:05:08:65:ae:05:32:e5:c6:fa:e0:f8:39:8c:
         e3:37:ef:12:54:f3:0f:0c:1a:ec:0f:ca:ac:c1:48:81:fe:e6:
         68:e6:b8:97:5c:cd:4c:3a:31:5c:02:bb:3e:58:67:d1:56:e3:
         fa:a2:7c:4f:91:41:d0:a2:b4:34:25:8f:37:11:f7:b2:3f:e9:
         be:58:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org